JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 92.36.144.113

92.36.144.113 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 25%: ?

25%

ISP	BH Telecom d.d. Sarajevo
Usage Type	Fixed Line ISP
ASN	AS9146
Domain Name	bhtelecom.ba
Country	🇧🇦 Bosnia and Herzegovina
City	Sarajevo, Federation of B&H

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 92.36.144.113

Whois 92.36.144.113

IP Abuse Reports for 92.36.144.113:

This IP address has been reported a total of 8 times from 4 distinct sources. 92.36.144.113 was first reported on July 8th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-09 10:37:55 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 92.36.144.113 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 92.36.144.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 06:37:49.971329 2026] [security2:error] [pid 13842:tid 13842] [client 92.36.144.113:59137] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.36.144.113 (+1 hits since last alert)\|thenutritionfixhollysprings.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thenutritionfixhollysprings.com"] [uri "/xmlrpc.php"] [unique_id "ak95_V0VhW2CmUB5678IEwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 10:06:17 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 92.36.144.113 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 92.36.144.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 06:06:09.996710 2026] [security2:error] [pid 26713:tid 26713] [client 92.36.144.113:52629] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.36.144.113 (+1 hits since last alert)\|writebetweenthelines.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "writebetweenthelines.com"] [uri "/xmlrpc.php"] [unique_id "ak9ykQ3mcxaRzXCSqgJOaAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-09 08:13:56 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 WeekendWeb	2026-07-09 06:59:34 (1 week ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 22:00:33 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 92.36.144.113 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 92.36.144.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 18:00:26.228075 2026] [security2:error] [pid 11478:tid 11478] [client 92.36.144.113:51263] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.36.144.113 (+1 hits since last alert)\|microbooty.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "microbooty.com"] [uri "/xmlrpc.php"] [unique_id "ak7Ieo02924o2weoyFRMowAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 18:55:31 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 92.36.144.113 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 92.36.144.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 14:55:25.535587 2026] [security2:error] [pid 25217:tid 25217] [client 92.36.144.113:64967] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.36.144.113 (+1 hits since last alert)\|semisysteme.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "semisysteme.com"] [uri "/xmlrpc.php"] [unique_id "ak6dHSJ66uF4_E42C7fkxQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 15:14:46 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 92.36.144.113 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 92.36.144.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 11:14:40.673658 2026] [security2:error] [pid 633:tid 633] [client 92.36.144.113:61036] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.36.144.113 (+1 hits since last alert)\|monogay.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "monogay.org"] [uri "/xmlrpc.php"] [unique_id "ak5pYGwp7_HZh3vRnZKpuwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRob	2026-07-08 14:46:53 (1 week ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["Jetpack by WordPr ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)","Jetpack by WordPress.com","Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)","WordPre show less	Brute-Force Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 112.117.189.61

🇩🇪 5.175.188.193

🇳🇱 195.178.110.137

🇮🇩 163.7.8.79

🇺🇸 104.164.123.151

🇱🇹 62.60.130.238

🇺🇸 3.89.113.104

🇮🇷 2.189.5.162

🇹🇭 203.154.83.200

🇨🇷 190.112.222.22

🇳🇱 176.65.148.2

🇰🇭 150.129.21.193

🇳🇱 109.236.86.20

🇹🇼 61.223.76.145

🇺🇸 52.165.250.117

🇪🇸 46.253.45.10

🇳🇱 40.126.32.74

🇧🇷 200.11.123.221

🇿🇦 196.192.181.202

🇺🇸 195.184.76.135